Skip to content

Bump github.com/doyensec/safeurl from 0.2.2 to 0.2.4 in /http_action - #688

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/http_action/github.com/doyensec/safeurl-0.2.4
Open

Bump github.com/doyensec/safeurl from 0.2.2 to 0.2.4 in /http_action#688
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/http_action/github.com/doyensec/safeurl-0.2.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 15, 2026

Copy link
Copy Markdown

Bumps github.com/doyensec/safeurl from 0.2.2 to 0.2.4.

Release notes

Sourced from github.com/doyensec/safeurl's releases.

Release 0.2.4

  • Don't allow custom http.Transport objects with custom Dial implementations
  • Expanded the private network blocklist (thanks @​tonghuaroot)

Release 0.2.3

Commits
  • a2c2075 Merge pull request #12 from doyensec/fix/expand-private-net-block
  • 1bd4101 - README.md fix
  • 898c918 - disable support for custom dialers on user-configured http.Transport
  • d8f1021 - updated private network ranges
  • bb263db Merge branch 'cedric-cordenier-allow-transport-override'
  • 0ecf74a Update docstring according to review comments
  • bb0375f Add SetTransport to allow overriding the transport
  • 19bc3ff - updates static test IP address
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jul 15, 2026
@dependabot
dependabot Bot requested review from a team as code owners July 15, 2026 21:59
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jul 15, 2026
Bumps [github.com/doyensec/safeurl](https://github.com/doyensec/safeurl) from 0.2.2 to 0.2.4.
- [Release notes](https://github.com/doyensec/safeurl/releases)
- [Commits](doyensec/safeurl@v0.2.2...v0.2.4)

---
updated-dependencies:
- dependency-name: github.com/doyensec/safeurl
  dependency-version: 0.2.4
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/http_action/github.com/doyensec/safeurl-0.2.4 branch from 5487497 to 7931319 Compare July 28, 2026 12:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants